300-415 practice questions 281–290

1. Question 281 · 382 in bank

   Select 2

   Two spoke sites are connected to a single Cisco SD-WAN hub site. Which two features are required to configure dynamic tunnels between the two spoke sites? (Choose two.)

   • Aa control policy with the tloc-action backup command on the hub
   • Ba control policy with the tloc-action backup command on the spokes
   • Ctraffic engineering service on the spokes
   • Dtraffic engineering service on the hub
   • Ethe tloc-list command on the interface of the spokes

   Show answer

   Answer: BD

   References

   • Cisco documentation

   Next question

2. Question 282 · 382 in bank

   Select 2

   Which two features must an engineer consider while selecting the ISR1K with 4 Gb of memory for branches? (Choose two.)

   • AEnterprise Firewall
   • BURL filtering
   • CCisco AMP and AMP Threat Grid
   • DvSmart Controller
   • ECisco Umbrella DNS Security

   Show answer

   Answer: BC

   Next question

3. Question 283 · 382 in bank

   In which device state does the WAN Edge router create control connections, but data tunnels are not created?

   • Avalid
   • Bbackup
   • Cactive
   • Dstaging

   Show answer

   Answer: D

   Explanation

   Reference: https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/sdwan-wan-edge-onboarding-deploy-guide-2020nov.pdf page 16

   Source: Adapted from community discussion — Han2022

   Next question

4. Question 284 · 382 in bank

   Which component is used to optimize the multicast distribution tree enabled through the multicast network?

   • AOMP replicator
   • BvManage controllers
   • CVPN concentrator
   • DIGMP client

   Show answer

   Answer: A

   References

   • Cisco documentation

   Next question

5. Question 285 · 382 in bank

   Select 2

   

   Refer to the exhibit. The users establish a tunnel between branch A and B to communicate directly during video calls. The tunnel must go down after the call is complete. Which two configurations must be applied on the spokes to meet this requirement? (Choose two.)

   • Aomp send-path-limit 16
   • Bsystem on-demand enable
   • Cvpn 0 service TE
   • Dsystem on-demand idle-timeout 10
   • Eomp ecmp-limit 16

   Show answer

   Answer: BE

   References

   • Cisco documentation

   Next question

6. Question 286 · 382 in bank

   What is the purpose of `vpn 0` in the configuration template when onboarding a WAN Edge node?

   • AIt carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vEdge and vManager.
   • BIt carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vSmart and vBond.
   • CIt carries control traffic over secure DTLS or TLS connections between vSmart controllers and vEdge routers, and between vSmart and vBond.
   • DIt carries out-of-band network management traffic among the Cisco SD-WAN devices in the overlay network.

   Show answer

   Answer: C

   Explanation

   VPN 0 or transport VPN carries control traffic over secure DTLS or TLS connections between vSmart controllers and vEdge routers, and between vSmart controllers and vBond orchestrators VPN 0 . https://www.bing.com/ck/a?!&&p=5acc1b101683b550JmltdHM9MTY5NTUxMzYwMCZpZ3VpZD0xNGJjNzA4Mi1kODllLTZiYjQtMDIxZC02MzE3ZDkzNTZhZDcmaW5zaWQ9NTM0Mg&ptn=3&hsh=3&fclid=14bc7082-d89e-6bb4-021d-6317d9356ad7&psq=DTLS+and+TCP+connections+between+vsmart+and+vbond&u=a1aHR0cHM6Ly93d3cuY2lzY28uY29tL2MvZW4vdXMvdGQvZG9jcy9yb3V0ZXJzL3Nkd2FuL2NvbmZpZ3VyYXRpb24vc2VnbWVudGF0aW9uL3ZFZGdlLTIwLXgvc2VnbWVudGF0aW9uLWJvb2svc2VnbWVudGF0aW9uLmh0bWw&ntb=1

   Source: Adapted from community discussion — nbvolz

   References

   • Cisco documentation

   Next question

7. Question 287 · 382 in bank

   Which value of the IPsec rekey timer must be set by the engineer for an OMP graceful restart value set for 24 hours?

   • A6 hours
   • B12 hours
   • C36 hours
   • D48 hours

   Show answer

   Answer: D

   References

   • Cisco documentation

   Next question

8. Question 288 · 382 in bank

   Select 2

   What are the two requirements for plug-and-play provisioning on Cisco IOS XE SD-WAN devices? (Choose two.)

   • ADevices at branch offices must be able to reach the Cisco SD-WAN vSmart controller at the headquarters site.
   • BThe gateway router for the WAN Edge device must be able to reach devicehelper.cisco.com.
   • CThe gateway router for the WAN Edge device must be able to reach public DNS servers.
   • DThe gateway router for the WAN Edge device must be able to reach ztp.viptela.com.
   • EThe WAN Edge device must have a valid certificate.

   Show answer

   Answer: BE

   Next question

9. Question 289 · 382 in bank

   Which attribute identifies the type of a vRoute?

   • Aoriginator
   • Btag
   • Corigin
   • Dencapsulation

   Show answer

   Answer: D

   References

   • Cisco documentation

   Next question

10. Question 290 · 382 in bank

    Which statement describes the requirement of integrating a secure internet gateway (SIG) with a Cisco SD-WAN Edge device?

    • ABased on routing or policy, all customer internet traffic must be forwarded to the SIG.
    • BCredentials for a smart account are required.
    • CA Cisco umbrella organization ID is needed to establish the SIG.
    • DAttached to SIG tunnels, trackers monitor the respective SIG endpoints.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-415 practice, question 281. 382 questions available.